Privacy Policy

The data controller is MioMattone – PROVISIONAL LEGAL DETAILS, with provisional registered address at Via Esempio 1, 00100 Rome (RM), Italy.

Provisional VAT number: IT00000000000. Provisional tax code: 00000000000.

For matters concerning personal data protection, the controller can be contacted at privacy@miomattone.it.

MioMattone processes personal data provided directly by users, data required to provide its services and technical data generated while using the platform.

Personal data is processed for purposes related to the operation, security and provision of MioMattone services.

Agencies may upload information, text, images and other content relating to properties published through the platform.

An agency uploading content containing personal data is responsible for ensuring that it has an appropriate legal basis for communicating and publishing that information through MioMattone.

When a user submits a property enquiry, contact request or valuation request, the information provided may be disclosed to the relevant real estate agency so that it can respond.

The recipient agency will subsequently process that information under its own responsibilities and privacy information.

MioMattone uses Stripe to process payments relating to subscriptions and other purchases made through the platform.

Information required to complete a payment is processed by Stripe under its own terms and privacy information. MioMattone retains the information required to associate a payment with an account, verify transaction status and manage the purchased service.

MioMattone does not need to directly store full payment card details used through Stripe Checkout.

MioMattone uses Zoho email infrastructure to send communications relating to the service.

Information required to deliver those messages may therefore be processed by the email service provider under its own terms and privacy information.

Some MioMattone forms use Cloudflare Turnstile to distinguish legitimate interactions from automated or abusive attempts.

Technical information required to perform this security check may be processed when the service is used.

MioMattone uses artificial intelligence features both to assist users in searching for properties and to provide agencies with tools for activities such as generating and improving property content, translations and SEO optimisation.

To provide these features, information required for the request may be transmitted to Google services used by MioMattone for processing through Gemini models.

Users of AI features should not include unnecessary personal data, special-category data or other confidential information in their requests unless strictly necessary for the requested functionality.

Certain property pages may display maps and mapping resources provided by OpenStreetMap.

When a map is loaded, the user's browser makes requests to the servers providing those resources and technical information required for network communication may be processed, such as the IP address, browser information and request-related data.

MioMattone uses these resources exclusively to display the geographic location of properties and not for advertising or profiling purposes.

Property pages may contain YouTube videos and virtual tours provided by external services.

Such content is not loaded automatically when the page is opened. Before loading, MioMattone displays a notice and the connection to the external service occurs only when the user chooses to view the content.

For YouTube videos, MioMattone uses the embed mode through the youtube-nocookie.com domain. After the user chooses to view the video, YouTube may still process technical information and use cookies or other technologies according to its own policies and configurations.

Virtual tours may be provided by different third parties depending on the property. After the user chooses to view the tour, the relevant provider may process technical information and use cookies or similar technologies according to its own policies.

Data is retained for as long as necessary for the purposes for which it was collected and thereafter for any period required by applicable law or necessary to protect the controller's rights.

Account and service data is normally retained for the duration of the relationship with the user. Administrative and transaction information may be retained for longer where required by tax, accounting or civil law.

Data relating to requests and commercial leads is retained, after the request is closed, for a maximum period of 24 months from the closure date, unless further retention is necessary to comply with legal obligations or to establish, exercise or defend legal claims.

Information strictly necessary to document the handling of privacy rights requests is retained for 5 years from the closure of the request. Any documents used to verify identity are not normally retained beyond the time necessary to complete the verification.

Data may be processed by providers supplying technical and organisational services necessary for MioMattone to operate, within the limits of their respective functions.

Personal data is processed predominantly within the European Economic Area. MioMattone's main server infrastructure is currently located within the European Union.

Certain technology providers used for specific features may involve the processing or transfer of personal data to countries outside the European Economic Area. In such cases, transfers are carried out in accordance with Articles 44 et seq. of the GDPR, on the basis of an adequacy decision of the European Commission, where applicable, or by means of appropriate safeguards, such as the Standard Contractual Clauses approved by the European Commission, together with any supplementary measures required by applicable law.

Before commercial launch, the contractual arrangements relating to the providers actually used in production and the safeguards applicable to any international transfers will be finalised.

MioMattone adopts technical and organisational measures intended to protect data and accounts against unauthorised access, loss, alteration or misuse.

Account passwords are not stored in plain text and are protected using hashing techniques.

However, no information system can guarantee absolute security.

Where provided by applicable law, data subjects may request access to, rectification or deletion of their personal data, restriction of processing, data portability and may object to processing.

In the cases provided for by Article 20 GDPR, data subjects have the right to receive, in a structured, commonly used and machine-readable format, personal data concerning them which they have provided to MioMattone and, where technically feasible, may request the direct transmission of those data to another controller.

Where processing is based on consent, consent may be withdrawn at any time without affecting the lawfulness of processing carried out before withdrawal.

In the cases provided for by Article 21 GDPR, data subjects may object, on grounds relating to their particular situation, to processing based on the controller's legitimate interests. In such cases, processing will cease unless there are compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or the processing is necessary for the establishment, exercise or defence of legal claims.

Requests may be sent to privacy@miomattone.it.

Data subjects have the right to lodge a complaint with the competent supervisory authority. In Italy, the competent authority is the Garante per la protezione dei dati personali.

This policy may be updated following changes to applicable law, technology or the services offered by MioMattone.

The updated version will be made available on this page together with the date of the latest revision.